Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
File: 1-n6xEVEw-slAkQYeMUYqVlImiFo.mft (raw, json)
Hash identifier: hTNHFLAHcfu+mgg0KnenSN2YxQGhBakNuk9BLP5qi1I=
Subject key identifier: 50:43:5F:C6:CF:E2:45:1B:C2:04:02:72:0E:26:0D:11:00:EE:35:9A
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 0199466447202EDDA8B16AA8C85434B91042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
Manifest number: 0B6B
Signing time: Sun 14 Sep 2025 04:03:20 +0000
Manifest this update: Sun 14 Sep 2025 04:03:20 +0000
Manifest next update: Mon 15 Sep 2025 04:03:20 +0000
Files and hashes: 1: 1-n6xEVEw-slAkQYeMUYqVlImiFo.crl (hash: iENPqDZvVQ80xIl9CRWmmZrb1sfQohCMo7TYyqEnISk=)
2: 8jLs6VGmOeqUeiHElaeR3LqYElI.roa (hash: Atd4yjEwjoj5JGYuPikoIPA1A5Gpt38GxeMnhualwSA=)
3: heyE1gtTjLmdNCX82aeJdr0FIAo.roa (hash: ZejOC6mn1mNz9pg99nxI8IIG+SDEeycsyMgYYFPq42A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:46:64:47:20:2e:dd:a8:b1:6a:a8:c8:54:34:b9:10:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Sep 14 04:03:20 2025 GMT
Not After : Sep 15 04:03:20 2025 GMT
Subject: CN=50435fc6cfe2451bc20402720e260d1100ee359a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:c3:19:6a:c2:a7:ce:61:dc:24:8a:7f:9d:
2b:1c:b2:72:66:68:3e:ca:ea:c6:f4:42:80:7f:1b:
64:6f:03:dc:a0:c8:42:bb:ac:4e:d0:50:06:c0:da:
ab:7a:c8:09:d5:b3:f3:7e:9b:f5:b6:06:d4:81:c3:
46:37:29:18:5a:10:90:79:19:52:90:d4:2e:fb:87:
4d:2d:34:aa:59:51:ba:26:c9:9f:5a:80:a8:38:95:
a7:68:69:76:9d:d2:33:38:49:58:20:0b:55:cd:3e:
4d:8e:34:d5:6b:6d:26:fb:4f:07:da:7f:bd:8f:70:
3e:48:30:bd:fb:d9:aa:9b:05:96:33:4f:af:7e:7c:
79:3f:f6:e3:ec:88:40:f2:9a:2a:02:a5:cf:91:46:
f9:77:6b:5a:f9:28:76:15:f0:80:34:f9:5f:d5:7c:
3d:9a:df:0e:e6:d1:3e:30:ff:79:73:95:47:fb:dc:
06:03:b2:a4:8a:fa:de:50:0f:90:92:e2:e5:5b:ae:
49:31:1b:dc:db:df:b4:1d:c9:4d:6f:04:29:7d:80:
6e:ba:81:c0:c3:d3:48:4f:ee:9b:f9:33:6a:4c:3c:
4b:e8:2f:cf:5b:75:0f:49:a1:88:fc:04:71:7a:97:
1b:27:cb:40:27:b7:69:b2:5c:4d:ae:06:63:85:e9:
98:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:43:5F:C6:CF:E2:45:1B:C2:04:02:72:0E:26:0D:11:00:EE:35:9A
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6d:b5:b0:4f:b3:b2:01:f4:bc:16:44:d0:17:7d:5a:3c:bc:
4b:ff:db:43:43:40:42:68:4d:b6:9d:1d:56:6f:04:9f:14:0f:
86:98:bc:05:7e:1e:cd:ac:d2:01:d6:7a:8f:2f:1b:cb:52:0f:
65:d7:1d:dc:94:88:8f:82:0d:8a:45:6b:e1:cb:57:ab:9d:72:
5f:02:15:19:51:34:5c:8d:4f:31:de:3d:1b:05:5b:17:79:40:
69:6e:58:78:7f:5a:25:2a:c3:08:5f:7b:84:70:55:9c:5f:95:
d9:bd:b3:29:01:3f:a3:fd:2c:1c:31:4e:53:38:38:5a:7c:46:
c1:0e:d7:b2:ed:bf:ea:83:a0:eb:e8:ed:39:33:23:25:67:cd:
70:63:a5:c7:68:36:54:c5:7e:a3:1c:62:e4:eb:ce:b5:a3:e1:
94:a4:86:58:07:bd:87:10:3c:c1:57:98:7a:5c:51:1d:30:e4:
d0:c3:cb:34:71:3d:d9:fc:d8:25:44:b5:3b:d6:f1:0a:bb:05:
6b:e2:a3:26:ad:a4:f5:da:2f:17:06:7d:a2:48:c5:26:5b:ae:
fa:75:b0:16:a6:b3:61:b5:15:64:80:48:a5:cf:91:d8:71:9d:
cd:c8:23:10:d1:47:8d:4a:6e:63:63:5a:a6:bc:51:0b:e8:25:
cf:4e:4f:13
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZlGZEcgLt2osWqoyFQ0uRBCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhN2ViMTExNTEzMGZhYzk0MDkxMDYxZTMxNDYyYTU2NTIy
Njg4NWEwHhcNMjUwOTE0MDQwMzIwWhcNMjUwOTE1MDQwMzIwWjAzMTEwLwYDVQQD
Eyg1MDQzNWZjNmNmZTI0NTFiYzIwNDAyNzIwZTI2MGQxMTAwZWUzNTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsPDGWrCp85h3CSKf50rHLJyZmg+
yurG9EKAfxtkbwPcoMhCu6xO0FAGwNqresgJ1bPzfpv1tgbUgcNGNykYWhCQeRlS
kNQu+4dNLTSqWVG6JsmfWoCoOJWnaGl2ndIzOElYIAtVzT5NjjTVa20m+08H2n+9
j3A+SDC9+9mqmwWWM0+vfnx5P/bj7IhA8poqAqXPkUb5d2ta+Sh2FfCANPlf1Xw9
mt8O5tE+MP95c5VH+9wGA7KkivreUA+QkuLlW65JMRvc29+0HclNbwQpfYBuuoHA
w9NIT+6b+TNqTDxL6C/PW3UPSaGI/ARxepcbJ8tAJ7dpslxNrgZjhemYJQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFBDX8bP4kUbwgQCcg4mDREA7jWaMB8GA1UdIwQY
MBaAFPp+sRFRMPrJQJEGHjFGKlZSJohaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1uNnhFVkV3LXNsQWtRWWVNVVlxVmxJbWlGby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvYzE1ZTk5LTI5NjUtNDc2Zi05YWVm
LThhMjczZjRhZDE1ZC8xLzEtbjZ4RVZFdy1zbEFrUVllTVVZcVZsSW1pRm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JjL2MxNWU5OS0yOTY1LTQ3NmYtOWFlZi04YTI3M2Y0YWQx
NWQvMS8xLW42eEVWRXctc2xBa1FZZU1VWXFWbEltaUZvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJm21
sE+zsgH0vBZE0Bd9Wjy8S//bQ0NAQmhNtp0dVm8EnxQPhpi8BX4ezazSAdZ6jy8b
y1IPZdcd3JSIj4INikVr4ctXq51yXwIVGVE0XI1PMd49GwVbF3lAaW5YeH9aJSrD
CF97hHBVnF+V2b2zKQE/o/0sHDFOUzg4WnxGwQ7Xsu2/6oOg6+jtOTMjJWfNcGOl
x2g2VMV+oxxi5OvOtaPhlKSGWAe9hxA8wVeYelxRHTDk0MPLNHE92fzYJUS1O9bx
CrsFa+KjJq2k9dovFwZ9okjFJluu+nWwFqazYbUVZIBIpc+R2HGdzcgjENFHjUpu
Y2NaprxRC+glz05PEw==
-----END CERTIFICATE-----
Generated at Sun Sep 14 06:12:54 2025 by rpki-client